{"metadata": {"vulnerability": "cve-2021-39239", "count": 30, "kinds": {"milestone": 6, "sighting": 4, "kev": 0, "other": 20}}, "data": [{"timestamp": "2021-08-17T00:00:00Z", "date_only": false, "value": "2021-08-17T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-39239", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-09-16T00:00:00Z", "date_only": true, "value": "2021-09-16", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-39239", "record": "GSD-2021-39239", "field": "namespaces.gitlab.com.advisories.1.pubdate", "linked_record": true}, {"timestamp": "2021-09-16T14:40:20Z", "date_only": false, "value": "2021-09-16T14:40:20.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-39239", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-09-16T15:15:00Z", "date_only": false, "value": "2021-09-16T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7RP6-W7MG-H8RW", "record": "GHSA-7RP6-W7MG-H8RW", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2021-09-16T15:15:00Z", "date_only": false, "value": "2021-09-16T15:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-39239", "record": "UBUNTU-CVE-2021-39239", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-09-16T15:15:00Z", "date_only": false, "value": "2021-09-16T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-39239", "record": "GSD-2021-39239", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2021-09-16T15:15:07.527Z", "date_only": false, "value": "2021-09-16T15:15:07.527", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-39239", "record": "FKIE_CVE-2021-39239", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-09-16T18:22:56Z", "date_only": false, "value": "2021-09-16T18:22:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/28995", "record": "CVE-2021-39239", "field": "creation_timestamp", "uuid": "1707f072-f193-4ee1-970e-300980e3314f", "content": "\u203c CVE-2021-39239 \u203c\n\nA vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/28995"}, {"timestamp": "2021-09-17T18:29:23Z", "date_only": false, "value": "2021-09-17T18:29:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7RP6-W7MG-H8RW", "record": "GHSA-7RP6-W7MG-H8RW", "field": "modified", "linked_record": true}, {"timestamp": "2021-09-18T00:00:00Z", "date_only": true, "value": "2021-09-18", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-09240", "record": "CNVD-2022-09240", "field": "submitTime", "linked_record": true}, {"timestamp": "2021-09-20T00:00:00Z", "date_only": true, "value": "2021-09-20", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-39239", "record": "GSD-2021-39239", "field": "namespaces.gitlab.com.advisories.0.pubdate", "linked_record": true}, {"timestamp": "2021-09-20T20:22:05Z", "date_only": false, "value": "2021-09-20T20:22:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7RP6-W7MG-H8RW", "record": "GHSA-7RP6-W7MG-H8RW", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-09-21T00:00:00Z", "date_only": true, "value": "2021-09-21", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-39239", "record": "GSD-2021-39239", "field": "namespaces.gitlab.com.advisories.0.date", "linked_record": true}, {"timestamp": "2021-09-21T09:06:18Z", "date_only": false, "value": "2021-09-21T09:06:18.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "cve-2021-39239", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-09-27T00:00:00Z", "date_only": true, "value": "2021-09-27", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-39239", "record": "GSD-2021-39239", "field": "namespaces.gitlab.com.advisories.1.date", "linked_record": true}, {"timestamp": "2021-09-27T18:46:00Z", "date_only": false, "value": "2021-09-27T18:46Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-39239", "record": "GSD-2021-39239", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-02-09T00:00:00Z", "date_only": true, "value": "2022-02-09", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-09240", "record": "CNVD-2022-09240", "field": "openTime", "linked_record": true}, {"timestamp": "2023-07-03T22:00:00Z", "date_only": false, "value": "2023-07-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1630", "record": "WID-SEC-W-2023-1630", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-07-03T22:00:00Z", "date_only": false, "value": "2023-07-03T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1630", "record": "WID-SEC-W-2023-1630", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-07-03T22:00:00Z", "date_only": false, "value": "2023-07-03T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1630", "record": "WID-SEC-W-2023-1630", "field": "vulnerabilities.2.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-07-03T22:00:00Z", "date_only": false, "value": "2023-07-03T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1630", "record": "WID-SEC-W-2023-1630", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-12-13T01:23:15.974Z", "date_only": false, "value": "2023-12-13T01:23:15.974904Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-39239", "record": "GSD-2021-39239", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-05-14T02:35:13Z", "date_only": false, "value": "2024-05-14T02:35:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4454", "record": "CVE-2021-39239", "field": "creation_timestamp", "uuid": "b0374bcc-89b5-4d23-9fe3-576090c6d828", "content": "#exploit\n1. CVE-2021-39239:\nA vulnerability in XML processing in Apache Jena <4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-39239\n\n2. CVE-2021-24620:\nRCE in WordPress Simple Ecomm. Shopping Cart <2.2.5\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-24620\n\n3. CVE-2021-41773:\nApache 2.4.49 Path Traversal\nhttps://github.com/numanturle/CVE-2021-41773\nhttps://github.com/habibiefaried/CVE-2021-41773-PoC", "url": "https://t.me/CyberSecurityTechnologies/4454", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-04T02:06:40.799Z", "date_only": false, "value": "2024-08-04T02:06:40.799Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-39239", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T02:06:40.799Z", "date_only": false, "value": "2024-08-04T02:06:40.799Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-39239", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:54:04.284Z", "date_only": false, "value": "2024-08-15T17:54:04.284+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1630", "record": "WID-SEC-W-2023-1630", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-06-17T04:03:22.753Z", "date_only": false, "value": "2026-06-17T04:03:22.753", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-39239", "record": "FKIE_CVE-2021-39239", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-01T17:00:38.647Z", "date_only": false, "value": "2026-09-01T17:00:38.647776Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4546", "record": "CVE-2021-39239", "field": "creation_timestamp", "uuid": "1efacc94-243e-4723-8dd1-5ee84ad606ba", "url": "https://t.me/cissp/4546"}, {"timestamp": "2026-09-10T18:00:05.760Z", "date_only": false, "value": "2026-09-10T18:00:05.760004Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/4546", "record": "CVE-2021-39239", "field": "creation_timestamp", "uuid": "130cf566-9ab0-4297-9942-1a7031a8ea39", "url": "https://t.me/cissp/4546", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-17T09:08:32Z", "date_only": false, "value": "2026-10-17T09:08:32Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-39239", "record": "UBUNTU-CVE-2021-39239", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-15T23:11:55.180Z", "anchors": {"origin": {"timestamp": "2021-09-16T14:40:20Z", "date_only": false, "value": "2021-09-16T14:40:20.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-39239", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-09-16T14:40:20Z", "date_only": false, "value": "2021-09-16T14:40:20.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-39239", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-05-14T02:35:13Z", "date_only": false, "value": "2024-05-14T02:35:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4454", "record": "CVE-2021-39239", "field": "creation_timestamp", "uuid": "b0374bcc-89b5-4d23-9fe3-576090c6d828", "content": "#exploit\n1. CVE-2021-39239:\nA vulnerability in XML processing in Apache Jena <4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-39239\n\n2. CVE-2021-24620:\nRCE in WordPress Simple Ecomm. Shopping Cart <2.2.5\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-24620\n\n3. CVE-2021-41773:\nApache 2.4.49 Path Traversal\nhttps://github.com/numanturle/CVE-2021-41773\nhttps://github.com/habibiefaried/CVE-2021-41773-PoC", "url": "https://t.me/CyberSecurityTechnologies/4454", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 83850893.0, "hours": 23291.914722222224, "days": 970.4964467592592, "min_seconds": 83850893.0, "max_seconds": 83850893.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-09-16T14:40:20Z", "date_only": false, "value": "2021-09-16T14:40:20.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-39239", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-05-14T02:35:13Z", "date_only": false, "value": "2024-05-14T02:35:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4454", "record": "CVE-2021-39239", "field": "creation_timestamp", "uuid": "b0374bcc-89b5-4d23-9fe3-576090c6d828", "content": "#exploit\n1. CVE-2021-39239:\nA vulnerability in XML processing in Apache Jena <4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-39239\n\n2. CVE-2021-24620:\nRCE in WordPress Simple Ecomm. Shopping Cart <2.2.5\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-24620\n\n3. CVE-2021-41773:\nApache 2.4.49 Path Traversal\nhttps://github.com/numanturle/CVE-2021-41773\nhttps://github.com/habibiefaried/CVE-2021-41773-PoC", "url": "https://t.me/CyberSecurityTechnologies/4454", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 162981095.180638, "hours": 45272.52643906611, "days": 1886.3552682944212, "min_seconds": 162981095.180638, "max_seconds": 162981095.180638, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-09-16T14:40:20Z", "date_only": false, "value": "2021-09-16T14:40:20.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-39239", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T23:11:55.180Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 79130202.180638, "hours": 21980.61171684389, "days": 915.8588215351621, "min_seconds": 79130202.180638, "max_seconds": 79130202.180638, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-05-14T02:35:13Z", "date_only": false, "value": "2024-05-14T02:35:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4454", "record": "CVE-2021-39239", "field": "creation_timestamp", "uuid": "b0374bcc-89b5-4d23-9fe3-576090c6d828", "content": "#exploit\n1. CVE-2021-39239:\nA vulnerability in XML processing in Apache Jena <4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-39239\n\n2. CVE-2021-24620:\nRCE in WordPress Simple Ecomm. Shopping Cart <2.2.5\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-24620\n\n3. CVE-2021-41773:\nApache 2.4.49 Path Traversal\nhttps://github.com/numanturle/CVE-2021-41773\nhttps://github.com/habibiefaried/CVE-2021-41773-PoC", "url": "https://t.me/CyberSecurityTechnologies/4454", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T23:11:55.180Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}